PT-2020-2957

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Series Routers versions affected versions not specified Cisco Small Business RV016, RV042, and RV082 Routers versions affected versions not specified Description The issue is related to multiple...

PT-2020-2869

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Series Routers versions affected versions not specified Cisco Small Business RV016, RV042, and RV082 Routers versions affected versions not specified Description The issue is related to insufficient boundar...

PT-2020-2958

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 versions not specified Cisco Small Business RV325 versions not specified Cisco Small Business RV016 versions not specified Cisco Small Business RV042 versions not specified Cisco Small Business RV082 versions not...

PT-2020-2868

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Series Routers versions affected versions not specified Cisco Small Business RV016, RV042, and RV082 Routers versions affected versions not specified Description The issue is related to insufficient boundar...

PT-2020-2884

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Series Routers versions affected versions not specified Cisco Small Business RV016, RV042, and RV082 Routers versions affected versions not specified Description The issue is related to insufficient boundar...

Unauthorized access vulnerability in zabbix management platform

zabbix is a WEB-based interface to provide distributed system monitoring and network monitoring capabilities of enterprise-class open source solutions . An unauthorized access vulnerability exists in the zabbix management platform, which can be exploited by attackers to obtain sensitive informati...

CVE-2020-6090

An exploitable code execution vulnerability exists in the Web-Based Management WBM functionality of WAGO PFC 200 03.03.1015. A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigger this...

Design/Logic Flaw

An exploitable code execution vulnerability exists in the Web-Based Management WBM functionality of WAGO PFC 200 03.03.1015. A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigger this...

CVE-2020-6090

An exploitable code execution vulnerability exists in the Web-Based Management WBM functionality of WAGO PFC 200 03.03.1015. A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigger this...

CVE-2020-6090

The CVE-2020-6090 entry concerns WAGO PFC 200 Web-Based Management (WBM) version 03.03.10(15). Multiple sources (Talos, Red Hat, Tenable, CNVD, etc.) confirm an exploitable code execution vulnerability triggered by specially crafted authenticated HTTP requests to WBM. The root cause is that WBM’s...

PT-2020-18917 · Wago · Wago Pfc 200

Name of the Vulnerable Software and Affected Versions: WAGO PFC 200 version 03.03.1015 Description: A code execution issue exists in the Web-Based Management functionality, allowing remote code execution through specially crafted HTTP requests. An attacker can trigger this issue by making an...

WAGO PFC 200 Code Execution Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A security vulnerability exists in the Web-Based Management WBM feature in the WAGO PFC 200 version 03.03.1015. An attacker could exploit the vulnerability by sending a series of specially crafted HTTP requests ...

CVE-2020-6090: Insufficient Verification of Data Authenticity

An exploitable code execution vulnerability exists in the Web-Based Management WBM functionality of WAGO PFC 200 03.03.1015. A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigger this...

Updated python-typed-ast packages fix security vulnerability

Updated python-typed-ast package fixes security vulnerabilities: typedast 1.3.0 and 1.3.1 has a handlekeywordonlyargs out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source but not necessarily execute it may be able to crash the interpreter process...

WAGO PFC 200 Web-Based Management (WBM) Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the Web-Based Management WBM functionality of WAGO PFC 200 03.03.1015. A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigg...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...